CVEvulnerability
CVE-2025-20288
5.3 MEDIUM
Official page ↗
- Status
- Analyzed
- Published
- 2025-07-16
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 3.1 ([email protected])
- 5.8 MEDIUM — CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:L/A:N
- CVSS 3.1 ([email protected])
- 5.3 MEDIUM — CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N
- Weaknesses
- CWE-918
Description
A vulnerability in the web-based management interface of Cisco Unified Intelligence Center could allow an unauthenticated, remote attacker to conduct a server-side request forgery (SSRF) attack through an affected device.
This vulnerability is due to improper input validation for specific HTTP requests. An attacker could exploit this vulnerability by sending a crafted HTTP request to an affected device. A successful exploit could allow the attacker to send arbitrary network requests that are sourced from the affected device.
Affected configurations
• cisco unified intelligence center 10.5\(1\)
• cisco unified intelligence center 11.0\(1\)
• cisco unified intelligence center 11.0\(2\)
• cisco unified intelligence center 11.0\(3\)
• cisco unified intelligence center 11.5\(1\)
• cisco unified intelligence center 11.6\(1\)
• cisco unified intelligence center 12.0\(1\)
• cisco unified intelligence center 12.5\(1\)
• cisco unified intelligence center 12.5\(1\)su
• cisco unified intelligence center 12.6\(1\)
• cisco unified intelligence center 12.6\(1\) es05 et
• cisco unified intelligence center 12.6\(1\) et
• cisco unified intelligence center 12.6\(2\)
• cisco unified contact center express 10.5\(1\)
• cisco unified contact center express 10.5\(1\)su1
• cisco unified contact center express 10.5\(1\)su1es10
• cisco unified contact center express 10.6\(1\)
• cisco unified contact center express 10.6\(1\)su1
• cisco unified contact center express 10.6\(1\)su2
• cisco unified contact center express 10.6\(1\)su2es04
• cisco unified contact center express 10.6\(1\)su3
• cisco unified contact center express 10.6\(1\)su3es01
• cisco unified contact center express 10.6\(1\)su3es02
• cisco unified contact center express 10.6\(1\)su3es03
• cisco unified contact center express 11.0\(1\)su1
• cisco unified contact center express 11.0\(1\)su1es02
• cisco unified contact center express 11.0\(1\)su1es03
• cisco unified contact center express 11.5\(1\)es01
• cisco unified contact center express 11.5\(1\)su1
• cisco unified contact center express 11.5\(1\)su1es01
• cisco unified contact center express 11.5\(1\)su1es02
• cisco unified contact center express 11.5\(1\)su1es03
• cisco unified contact center express 11.6\(1\)
• cisco unified contact center express 11.6\(1\)es01
• cisco unified contact center express 11.6\(1\)es02
• cisco unified contact center express 11.6\(2\)
• cisco unified contact center express 11.6\(2\)es01
• cisco unified contact center express 11.6\(2\)es02
• cisco unified contact center express 11.6\(2\)es03
• cisco unified contact center express 11.6\(2\)es04
• cisco unified contact center express 11.6\(2\)es05
• cisco unified contact center express 11.6\(2\)es06
• cisco unified contact center express 11.6\(2\)es07
• cisco unified contact center express 11.6\(2\)es08
• cisco unified contact center express 12.0\(1\)
• cisco unified contact center express 12.0\(1\)es01
• cisco unified contact center express 12.0\(1\)es02
• cisco unified contact center express 12.0\(1\)es03
• cisco unified contact center express 12.0\(1\)es04
• cisco unified contact center express 12.5\(1\)
• cisco unified contact center express 12.5\(1\) su01 es01
• cisco unified contact center express 12.5\(1\) su01 es02
• cisco unified contact center express 12.5\(1\) su01 es03
• cisco unified contact center express 12.5\(1\) su02 es01
• cisco unified contact center express 12.5\(1\) su02 es02
• cisco unified contact center express 12.5\(1\) su02 es03
• cisco unified contact center express 12.5\(1\) su02 es04
• cisco unified contact center express 12.5\(1\) su03 es01
• cisco unified contact center express 12.5\(1\) su03 es02
• cisco unified contact center express 12.5\(1\) su03 es03
… and 9 more
Related
Weakness · CWE (1)
- CWE-918 Server-Side Request Forgery weakness